Executive Summary
The codexui-android npm package, a remote web UI for OpenAI Codex with 29,000 weekly downloads, steals Codex authentication tokens.
What Happened
Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for OpenAI Codex, attracting over 29,000 weekly downloads. The package is still available for download from the repository. What
Affected Products
- codexui-android (npm)
- OpenAI Codex
Vulnerability / Attack Technique
Malicious AI tool package stealing tokens
Technical Mechanism
As reported, the package exfiltrates Codex credentials.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Third-party UIs for AI agents can steal their credentials. RealGround analysis: use only official clients.
Recommended Controls
- Remove codexui-android
- Revoke and reissue Codex tokens
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/openai-codex-authentication-tokens.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.